Known exploited vulnerabilities

Pi-hole vulnerabilities attackers have used

Every Pi-hole vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 Pi-hole vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2020-8816, added Dec 10, 2021. AdminLTE has the most entries (1).

In KEV, all time
1
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Pi-hole entry in CISA KEV

  1. CVE-2020-8816

    Added · due

    Pi-Hole AdminLTE Remote Code Execution Vulnerability

    Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.